Modal
Detection and Response Engineer
$150K–$270K
New York +2 · On-site · Full-time · Posted Aug 17, 2026
- Location
- New York
Stockholm
San Francisco
About the job
Build automated detection, investigation, and response systems to identify and address threats across Modal’s infrastructure and platform.
What you'll do
- Build and improve detections, security telemetry, and investigation tooling across infrastructure and production systems.
- Investigate incidents, create response playbooks and automation, and drive post-incident improvements.
- Partner with engineering teams on secure, observable systems and use LLMs to improve security workflows.
What they ask for
- Experience in detection engineering, incident response, security engineering, or software engineering with a strong security focus.
- Strong software engineering skills and experience building production systems.
- Experience investigating security incidents in cloud-native or distributed environments.
- Familiarity with cloud infrastructure, Kubernetes, Linux, networking, and strong SQL skills.
Nice to have
- Experience building AI- or LLM-powered security tooling.
- Experience with SIEM, SOAR, or EDR platforms; Kubernetes security or large-scale cloud infrastructure; threat hunting, malware analysis, or digital forensics; or security operations in a high-growth engineering organization.
Pay
$150K – $270K (base salary)
Tools
Kubernetes, Linux, SQL, LLMs, SIEM, SOAR, EDR
AI focus
Use LLMs to automate repetitive analysis, accelerate investigations, and surface actionable insights from security telemetry; apply AI to detection, investigation, and response.
Model-written summary · the original posting is authoritative